Cyber Incident Victim: The Podiatric Offices of Bobby Yee
Date:
Oct 2018
Location:
United States of America
Summary
The Podiatric Offices of Bobby Yee experienced a ransomware attack that resulted in unauthorized alteration and potential corruption of medical files containing patient information. While there was no evidence of data exfiltration or unauthorized viewing, compromised data may have included names, addresses, telephone numbers, Social Security numbers, health insurance details, dates of birth, and medical records. The organization promptly secured affected systems and initiated efforts to assess the incident's scope, with potential needs to reconstruct altered personal and medical information for impacted individuals.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On October 29, 2018, The Podiatric Offices of Bobby Yee experienced a ransomware attack that resulted in unauthorized alteration and potential corruption of medical files containing patient information. The incident compromised systems storing sensitive personal and medical records, though the organization stated no evidence indicated data exfiltration or unauthorized viewing of information. Affected data included first and last names, addresses, telephone numbers, ages, genders, dates of birth, Social Security numbers, health insurance policy numbers, and full medical records. The attack disrupted normal operations by compromising the integrity of patient files, creating uncertainty about whether records were altered, corrupted, or rendered inaccessible. Approximately 24,000 patients were notified of potential exposure through a December 20 press release, which characterized the event as both confirmed alteration and potential corruption without fully clarifying the technical outcome.
The practice initiated protective measures upon discovery, though specific containment steps were not detailed beyond assessing the incident's nature and scope. Patients were advised that reconstruction or reconfirmation of their medical information might be necessary if files were compromised. A dedicated toll-free number (877-845-8111) and Monterey mailing address were established for inquiries, operating during weekday business hours. The notification acknowledged possible inconvenience to patients but did not disclose whether backups existed to restore corrupted data or whether ransom demands were received. No law enforcement involvement or third-party forensic analysis was referenced in the available communication. The practice concluded its public statement by expressing regret for concerns caused while maintaining there was no evidence of actual data misuse beyond system alteration.